Security

Dectyl verifies detection rules using read-only access. This page describes how the assessment handles your environment and data.

Assessment scope

• Reads configuration and telemetry metadata only.
• Does not collect event contents.
• Does not modify your security configuration.
• Does not inject events into your telemetry pipelines.
• Uses read-only queries that return metadata.

No software is installed for the assessment. See Where it runs.

Customer data

• We use customer data only to provide the service, unless the customer agrees otherwise in writing.
• Access to customer assessment data is restricted to personnel who need it.
• Retention is described on our Retention page.

Reporting a vulnerability

Email security@dectyl.io with a description of the issue, where it occurs, and the steps to reproduce it. We will acknowledge receipt of your report.

When testing, do not access or modify data that does not belong to you, and do not perform denial-of-service, social engineering, or physical attacks. Please allow us reasonable time to resolve the issue before disclosing it publicly.

We may, at our discretion, pay up to US$1,000 for high-severity vulnerabilities.

Our security contact file is published at /.well-known/security.txt.